What to Do if You Clicked a Fake Delivery Text Link
Clicked a delivery text? Close it fast, report it, then secure any password, payment, or ID detail shared.
If you clicked a fake delivery text link, close the page right away and enter nothing else. What you do next depends on whether you typed a password, card number, or personal details. Smishing means a text that pretends to be a delivery service to steal information or money.
An unsolicited delivery text with a link that claims to be from USPS is fake, because USPS sends texts only after you request tracking for a specific number, according to the Postal Inspection Service notice on fake USPS messages.
Verification note: Program terms and availability can change. This page was checked against linked sources on November 05, 2026.
You entered nothing — close and report it
Close the browser tab at once and type nothing on the page. Do not reply, and do not text STOP, because a reply can confirm your number is active. Delete the message after you report it.
Forward the text to 7726 (SPAM) so your carrier can identify and block the sender, then block the number, as described in the Federal Communications Commission guide to robotext scams.
How to report a postal-themed text
Save the sender name, date, and full text body. Take a screenshot that shows the sender and date alongside the message. Email the text body plus the screenshot to [email protected] without clicking the link again.
You can also file a fraud report at ReportFraud.ftc.gov.
Did you type a password on the fake site?
Change that password immediately on the real account. Change it anywhere else you reused the same password, since reuse lets one stolen password open other accounts. Turn on two-factor authentication where the account offers it.
That second code or prompt can block logins even if someone has your password.
Did you pay a small fee or enter card details?
Call your bank or card issuer using the number on your card. Ask to block or replace the card and dispute the charge, a step noted in the Federal Trade Commission spotlight on top text scams. Check statements for unfamiliar charges in the next few weeks.
Small test charges often come before larger ones, so flag anything you do not recognize.
Did you enter a Social Security number or other ID data?
File a report at IdentityTheft.gov to get an FTC Identity Theft Report and a free personal recovery plan, available through the IdentityTheft.gov reporting site. The plan includes pre-filled letters you can send to creditors and agencies. For any link click, take these phone safety steps:
- Install nothing the page offered or downloaded
- Run a security scan with your phone's built-in tool or trusted security app
- Watch bank, card, and credit statements for unfamiliar activity